Application No.: 10/602,078 

Amendment Dated May 7, 2009 

Reply to Official Action of February 3. 2009 



Amendments to the Claims : 

1 . (Previously Presented) A method for controlling access to an event, the method 
comprising: 

receiving, at a first network entity from a second network entity, a request to access 
event-based information available within a network and associated with an event, the second 
network entity being unknown to the first network entity prior to the first network entity 
receiving the request; 

receiving, at the first network entity, consent to access the event-based information, and 
automatically creating an authorization in response to receiving the consent, the consent being 
receivable and the authorization being creatable without use of a certificate from the second 
network entity and without verifying an identity of the second network entity, wherein the first 
network entity is configured to control access to the event-based information; 

transmitting the authorization from the first network entity to the second network entity; 

transmitting a subscription message from the second network entity to an event server 
configured to maintain the event, wherein the subscription message includes the authorization 
and an event package describing the event-based information; and 

determining at the event server whether to accept the subscription message based upon the 
authorization. 

2. (Cancelled). 

3 . (Previously Presented) The method of Claim 1 , wherein receiving a request 
comprises: 

receiving a trigger at the first network entity from the second network entity; and 
executing the trigger to thereby activate the request to access the event-based 
information. 
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4. (Previously Presented) The method of Claim 1 , wherein the receiving a consent 
to access the event-based information associated with the event comprises receiving a consent to 
access the event-based information associated with the event with at least one parameter 
including at least one of a predefined granularity, frequency or time period, and wherein creating 
an authorization comprises creating an authorization including the at least one parameter. 

5. (Previously Presented) The method of Claim 1 , wherein determining whether to 
accept the subscription message comprises: 

verifying the authorization; and 

accepting the subscription message if the authorization is verified to thereby provide the 
second network entity with access to the event. 

6. (Previously Presented) The method of Claim 5, wherein verifying the 
authorization includes verifying that at least one of a predefined frequency or time period has not 
been exceeded. 

7. (Previously Presented) The method of Claim 5, wherein verifying the 
authorization includes verifying a shared secret. 

8. (Previously Presented) The method of Claim 5, wherein accepting the 
subscription message comprises accepting the subscription message to thereby provide the 
second network entity with access to the event-based information with a predefined granularity. 

9. (Previously Presented) The method of Claim 1 further comprising storing the 
authorization in a cache such that the event server can retrieve the authorization in response to 
receiving at least one subsequent subscription message, wherein the at least one subsequent 
subscription message includes an event package describing the event-based information. 



3 of 19 



Application No.: 10/602,078 

Amendment Dated May 7, 2009 

Reply to Official Action of February 3, 2009 



10. (Previously Presented) A system for controlling access to an event, the system 
comprising: 

a first network entity; 
a second network entity; 

wherein the first network entity is configured to control access to event-based 
information available within a network and associated with an event, the first network entity 
being configured to receive, from the second network entity, a request to access event-based 
information, the second network entity being unknown to the first network entity prior to the first 
network entity receiving the request, 

wherein the first network entity is configured to receive consent to access the event-based 
information associated with the event, wherein the first network entity is configured to 
automatically create an authorization in response to receiving the consent, and thereafter transmit 
the authorization, the consent being receivable and the authorization being creatable without use 
of a certificate from the second network entity and without verifying an identity of the second 
network entity, 

wherein the second network entity is configured to receive the authorization, and 
thereafter transmit a subscription message, wherein the subscription message includes the 
authorization and an event package describing the event-based information; and 

an event server configured to maintain the event, wherein the event server is configured 
to receive the subscription message, and thereafter determine whether to accept the subscription 
message based upon the authorization. 

11. (Cancelled). 

12. (Previously Presented) The system of Claim 10, wherein the first network entity 
being configured to receive the request includes being configured to: 

receive a trigger at the first network entity to thereby enable the first network entity to 
execute the trigger to thereby activate the request to access the event-based information. 
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13. (Previously Presented) The system of Claim 10, wherein the first network entity 
is configured to further receive at least one parameter associated with the consent, wherein the at 
least one parameter includes a least one of a predefined granularity, frequency and time period, 
and wherein the first network entity is configured to create the authorization including the at 
least one parameter. 

14. (Previously Presented) The system of Claim 10, wherein the event server being 
configured to determine whether to accept the subscription message includes being configured 
to: 

verify the authorization; and 

accept the subscription message if the authorization is verified to thereby provide the 
second network entity with access to the event. 

15. (Previously Presented) The system of Claim 14, wherein the event server being 
configured to verify the authorization includes being configured to verify that at least one of a 
predefined frequency or time period has not been exceeded. 

16. (Previously Presented) The system of Claim 14, wherein the event server is 
configured to verify the authorization by verifying a shared secret. 

17. (Previously Presented) The system of Claim 14, wherein the event server is 
configured to accept the subscription message to thereby provide the second network entity with 
access to the event-based information with a predefined granularity. 

1 8. (Previously Presented) The system of Claim 1 0, wherein the event server 
maintains a cache, wherein the event server is configured to store the authorization in the cache 
such that the event server can retrieve the authorization in response to receiving at least one 
subsequent subscription message, and wherein the at least one subsequent subscription message 
includes an event package describing the event-based information. 
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19. (Currently Amended) An apparatus comprisin g a processor and a memory storing 
executable instructions that in response to execution by the processor cause the apparatus or 
another apparatus to at least perform the following : 

a processor configured to control access to event based information available within a 
network and associated with an event maintained by an event server, the processor being 
configured to receive receiving , from a second network entity, a request to access event-based 
information available within a network and associated with an event maintained by an event 
server , the second network entity being unknown to the apparatus prior to the apparatus 
receiving the request, 

wherein the processor is configured to execute a software application to automatically 
create -creating an authorization in response to a user interface receiving consent to access the 
event-based information, the consent being receivable and the authorization being creatable 
without use of a certificate from the second network entity and without verifying an identity of 
the second network entitVT-an d; and 

wherein the processor is configured to direct directing t ransmission of the authorization 
to the second network entity to enable the second network entity to thereafter subscribe to the 
event based upon the authorization. 

20. (Currently Amended) The apparatus of Claim 1 9, wherein the processor 
apparatus is triggerable based upon receipt of the request to access the event-based information, 
the processor apparatus being triggerable to execute the software application to present present a 
prompt to receive consent to access the event-based information before the user interface 
receives the consent. 



2 1 . (Currently Amended) The apparatus of Claim 1 9, wherein 
configured to execute the software application to create the creating an authorization comprises 
creating an authorization including at least one parameter associated with the consent, wherein 
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the at least one parameter includes at least one of a predefined granularity, frequency or time 
period, the at least one parameter having been received by the user interface. 

22. (Previously Presented) The method of Claim 1 , wherein receiving consent 
comprises receiving consent to access event-based information related to the first network entity. 

23 . (Previously Presented) The system of Claim 1 0, wherein the first network entity 
is configured to control access to event-based information related to the first network entity. 



24. 



(Currently Amended) The apparatus of Claim 19, wherein ti 
configured to execute a software application to automatically creating an authorization comprises 
automatically efeate- creating an authorization in response to the user interface receiving consent 
to access event-based information related to the apparatus. 



25. (Previously Presented) The method of Claim 1, wherein receiving consent 
comprises receiving consent from a user of the first network entity via a user interface thereof. 

26. (Previously Presented) The system of Claim 10, wherein the first network entity 
is configured to receive consent from a user of the first network entity via a user interface 
thereof. 

27. (Currently Amended) The apparatus of Claim 19, wherein the processor is 
configured to execute a software application to automatically creating an authorization comprises 
automatically ereate -creating an authorization in response to the user interface receiving the 
consent from a user of the apparatus. 



28. (Previously Presented) A method comprising: 

receiving, at a first network entity from a second network entity, a request to access 
event-based information available within a network and associated with an event maintained by 
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an event server, the first network entity being configured to control access to the event-based 
information, the second network entity being unknown to the first network entity prior to the first 
network entity receiving the request; 

receiving, via a user interface of a first network entity, consent to access the event-based 
information; 

executing, at the first network entity, a software application to automatically create an 
authorization in response to the user interface receiving the consent, the consent being receivable 
and the authorization being creatable without use of a certificate from the second network entity 
and without verifying an identity of the second network entity; and 

transmitting the authorization from the first network entity to the second network entity 
to enable the second network entity to thereafter subscribe to the event based upon the 
authorization. 

29. (Cancelled). 

30. (Previously Presented) The method of Claim 28, wherein receiving a request 
comprises: 

receiving a trigger at the first network entity from the second network entity; and 
executing the trigger at the first network entity to thereby activate the request to access 
the event-based information. 

3 1 . (Previously Presented) The method of Claim 28, wherein the receiving a consent 
to access the event-based information associated with the event comprises receiving a consent to 
access the event-based information associated with the event with at least one parameter 
including at least one of a predefined granularity, frequency or time period, and wherein creating 
an authorization comprises creating an authorization including the at least one parameter. 

32. (Previously Presented) The method of Claim 28, wherein the processor is 
configured to execute a software application to automatically create an authorization in response 
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to the user interface receiving consent to access event-based information related to the mobile 
station. 

33. (Previously Presented) The method of Claim 28, wherein receiving consent 
comprises receiving consent from a user of the first network entity via a user interface thereof. 

34. (Previously Presented) The system of Claim 10, wherein the subscription 
message transmitted by the second network entity has a positive, non-zero expiration time. 

35. (Currently Amended) The apparatus of Claim 19, wherein the processor is 
configured to direct directing transmission comprises directing t ransmission of the authorization 
to enable the second network entity to subscribe to the event according to a subscription having a 
non-zero expiration time. 

36. (Previously Presented) The method of Claim 28, wherein transmitting the 
authorization comprises transmitting the authorization to enable the second network entity to 
subscribe to the event according to a subscription having a non-zero expiration time. 
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